How To Query DNS From VLANs
-
I'm trying to get the DNS resolver in pfSense to answer queries from other local VLANs that are not directly attached or routed via pfSense. There is a 192.168.1.0/24 subnet between the LAN interface on a SG-3100 and a core switch (Cisco) that acts as a gateway and does all routing for various other VLANs. I don't want to extend all of the internal traffic from the other VLANs to pfSense. A gateway to the core switch and static routes have been configured. All VLANs are fully routed and have internet access, but none of the networks except the 192.168.1.0/24 that is directly attached is able to reach the pfSense DNS resolver. They are able to reach external DNS servers such as 8.8.8.8 / 8.8.4.4 without issue. I've played with various firewall rules and settings, but none of that seems to be relevant. Is is possible to get the DNS resolver to communicate with other non-local subnets?
Thanks!
-
@jots you would need to adjust your acl of unbound if you want to allow other networks to be able to query unbound. Out of the box pfsense auto acls for unbound would allow directly attached - but if you have some other network that is allowed firewall rules to talk to pfsense IPs - you would need to edit the unbound acls to allow for that.
-
Thank you! I'm not sure how I missed that tab.
